Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,061
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
wikimedia/mediawiki-libs-ObjectFactory
Construct objects from configuration instructions. Mirror of https://gerrit.wikimedia.org/g/mediawiki/libs/ObjectFactory See https://www.mediawiki.org/wiki/Developer_access for contributing.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Go
willackerly/rebar
Swarm collective learning & coordination framework with MCP-enabled ASK agents for enterprise-scale AI collaboration
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
wille/haprovider
Production ready High Availability load balancer for Ethereum/Solana nodes and RPC providers
MITSep 19, 2026 · metrics 2.10.0
—
wirenboard/wb-rules-system
Default system rules for Wiren Board
MITSep 19, 2026 · metrics 2.10.0
npm
wmfs/supercopy
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITSep 16, 2026 · metrics 2.10.0
Go · npm
x-z7a/zoal-honeycomb
No repository description published.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
No licenseSep 16, 2026 · metrics 2.10.0
crates.io
xandlom/rs-pfcp
This project is a Rust implementation of the PFCP protocol, inspired by the go-pfcp library.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
xentral/laravel-api
A laravel package which contains a sophisticated API workflow
MITSep 16, 2026 · metrics 2.10.0
PyPI
xeondb/Xeondb
Xeondb is a real-time big data database that is designed to be fast, efficient, and easy to use. It is built on top of a custom storage engine that is optimized for high performance and low latency.
MITSep 18, 2026 · metrics 2.10.0
Go
xgo-dev/llar
Cloud-based Package Management Service
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
xord/beeps
A Simple Synthesis Library.
MITSep 16, 2026 · metrics 2.10.0
npm
yWorks/react-yfiles-core
This module provides shared functionality for the yFiles React components
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
yiisoft/psr-dummy-provider
Dummy PSR provider
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Go
zeabur/stratus
Read-only OCI Distribution Spec v1 registry backed by S3, with a Go library for pushing BuildKit OCI images.
MPL-2.0Sep 18, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
Go
zgsm-sangfor/chat-rag
A prompt engine that enhances generation capabilities through RAG
MITSep 20, 2026 · metrics 2.10.0
Go
zhiyunliu/glue
No repository description published.
MITSep 21, 2026 · metrics 2.10.0
npm
zlliang/pi-spark
Pi package that polishes your daily experience
MITSep 16, 2026 · metrics 2.10.0
Go
0spoon/seamless
Local-first shared memory and task coordination for AI coding agents. One Go binary, MCP server, markdown files you own. Hooks for Claude Code and Codex CLI (and their desktop apps).
MITSep 16, 2026 · metrics 2.10.0
PyPI · npm
1drturtle/avrae-ls
Python & VS Code language server for Avrae/Draconic
MITSep 18, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
61418/boto3-client-cache
A concurrency-safe, bounded cache for boto3 clients and resources with deterministic identity semantics.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
73ai/openbotkit
A kit to build your own personal assistant with safety
No licenseSep 20, 2026 · metrics 2.10.0
npm
ALADAS-org/Cryptocalc
No repository description published.
Custom licenseSep 21, 2026 · metrics 2.10.0
Go
AdguardTeam/dnscrypt
No repository description published.
UnlicenseSep 19, 2026 · metrics 2.10.0
Go
AgentOnRails/agent-on-rails
No repository description published.
Custom licenseSep 20, 2026 · metrics 2.10.0